[Bug 114438] [NEW] Permissions for ldapi:// socket are too restrictive

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Martin Pitt (pitti):

On dapper i386, slapd creates the ldapi:// socket with

srwxr-xr-x 1 root root 0 2007-05-03 19:24 /var/run/ldapi

So only root processes can communicate with slapd via the unix socket.
After setting it to

srwxrwxrwx 1 root root 0 2007-05-03 19:33 /var/run/ldapi

libnss-ldap et.al. work properly. I found this thread on the openldap mailing list:
http://www.openldap.org/lists/openldap-software/200502/msg00176.html

I fixed it here by adding these three lines right after start_slapd and
start_slurpd in my /etc/init.d/slapd file:

        if [ -S /var/run/ldapi ]; then
                chmod a+rwx /var/run/ldapi
        fi

Ciao

Martin

** Affects: openldap2.2 (Ubuntu)
     Importance: Undecided
         Status: Fix Released

** Affects: openldap2.2 (Ubuntu Dapper)
     Importance: Undecided
         Status: New

-- 
Permissions for ldapi:// socket are too restrictive
https://bugs.edge.launchpad.net/bugs/114438
You received this bug notification because you are a member of Ubuntu Server Team, which is a direct subscriber.